security - Azure AD App Application Permissions vs Delegated Permissions -
i creating azure ad app , noticed there 2 permissions types, application permissions , delegated permissions. difference between 2 , under scenario should use them?
you typically use delegated permissions when want call web api logged on user. example web api needs filter data returns based on user is, or execute action logged in user. or log user initiating call.
application permissions used when application calls api itself. example weather forecast zipcode (it not matter user logged on). client can call api when there's no user present (some background service calling api update status).
Comments
Post a Comment